PT-2022-21468 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.7 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: A buffer overflow issue was addressed with improved bounds checking, which m...

PT-2022-9990

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Auto affected versions not specified Snapdragon IOT affected versions not specified Snapdragon Connectivity affected versions not...

PT-2022-7208 · Tiffsplit +6 · Tiffsplit +6

Name of the Vulnerable Software and Affected Versions: Tiffsplit versions 4.4.0 and earlier Description: The issue is related to a stack overflow in the TIFFVGetField function of the LibTIFF library, which can be exploited by an attacker to cause a Denial of Service DoS using a specially crafted...

GO-2021-0317 Uncontrolled memory consumption in math/big

Rat.SetString had an overflow issue that can lead to uncontrolled memory consumption...

macOS 11.x < 11.6.6 Multiple Vulnerabilities (HT213256)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.6. It is, therefore, affected by multiple vulnerabilities: - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - A logic issue...

GSD-2022-1001226 drm/bridge: anx7625: Fix overflow issue on reading EDID

drm/bridge: anx7625: Fix overflow issue on reading EDID This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-9207 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.10 Description: A heap-based buffer overflow issue exists in the TIFF parser functionality. This can be triggered by a specially-crafted file, leading to a heap buffer overflow. An attacker can exploit this by...

SUSE-SU-2022:0928-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2022-23943: heap out-of-bounds write in modsed bsc1197098. - CVE-2022-22720: HTTP request smuggling due to incorrect error handling bsc1197095. - CVE-2022-22719: use of uninitialized value of in r:parsebody in modlua bsc1197091. -...

SUSE-SU-2022:0263-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19783 fixes several issues. The following security issues were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi...

OPENSUSE-SU-2022:0058-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. bsc1194215 - CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow...

PT-2022-11132 · Unknown · Bone Voice Id Ta

Name of the Vulnerable Software and Affected Versions: bone voice ID TA affected versions not specified Description: The bone voice ID TA has a heap overflow issue. Successful exploitation of this issue may result in malicious code execution. Recommendations: At the moment, there is no informatio...

MGASA-2021-0553 Updated opencontainers-runc packages fix security vulnerability

It was discovered that there was an overflow issue in runc, the runtime for the Open Container Project, often used with Docker. The Netlink 'bytemsg' length field could have allowed an attacker to override Netlink-based container configurations. This vulnerability required the attacker to have so...

SUSE-SU-2021:3934-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Update to version 3.68.1: - CVE-2021-43527: Fixed a Heap overflow in NSS when verifying DER-encoded DSA or RSA-PSS signatures bsc1193170...

OPENSUSE-SU-2021:1374-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-35942: wordexp: handle overflow in positional parameter number bsc1187911 - CVE-2021-33574: Use pthreadattrcopy in mqnotify bsc1186489 This update was imported from the SUSE:SLE-15:Update update project...

PT-2021-23609 · Unknown +4 · Clickhouse +3

Name of the Vulnerable Software and Affected Versions: ClickHouse affected versions not specified Description: A heap out-of-bounds read issue exists in ClickHouse's LZ4 compression codec when parsing a malicious query. The LZ4::decompressImpl loop reads a 16-bit unsigned user-supplied value offs...

ROS-2-1914

2.1914 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

ROS-2-1698

2.1698 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

SUSE-SU-2021:2858-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufpalloc bsc1189145, CVE-2021-3682 - NULL pointer dereference in ESP bsc1180433, CVE-2020-35504 bsc1180434, CVE-2020-35505 bsc1180435, CVE-2020-35506 - NULL pointer dereference iss...

Bad alloc in `StringNGrams` caused by integer conversion

Impact The implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. python import tensorflow as tf tf.rawops.StringNGrams data='','', datasplits=0,2, separator...

OPENSUSE-SU-2021:2787-1 Security update for go1.15

This update for go1.15 fixes the following issues: Update to go1.15.15: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 - go47347 cmd/go: 'go list -f '.Stale'' stack overflow with cyclic imports - go47014 cmd/go: go mod vendor: open...